Radio communication system
Abstract
Problem to be solved.To provide a radio communication system capable of executing high-speed communication in call origination or termination.
Solution.A personal station device (PS) 2 transmits identification information and confidential key information in registering a position, and stores information on results of operation using authentication key information. A cell station device (CS) 1 stores the received confidential key information and the identification information being associated with each other and stores information of the results of operation using the authentication key information. The PS transmits the information of the results of operation during transmission or reception. The CS execute authentication on the basis of the received information of the results of operation and the stored information of the results of operation. The PS and CS perform encrypted communication by using the stored confidential key information.
Copyright (C)2009,JPO&INPIT
Term
No projected expiry on record.
- Priority and filed
- Published
- Today
1 claim: 1 independent, 0 dependent
- 1In a wireless communication system in which a base station device and a mobile station device wirelessly communicate with each other, the mobile station device uses identification information of the mobile station device and secret key information used for encryption of communication when registering a location with respect to the base station device. A transmission means at the time of location registration that wirelessly transmits the above to the base station device, a mobile station authentication key storage means that stores the authentication key information of the mobile station device, and a mobile station that stores the secret key information of the mobile station device. The secret key storage means, the mobile station calculation means that performs a predetermined calculation using the authentication key information stored in the mobile station authentication key storage means, and the information of the calculation result obtained by the mobile station calculation means are stored. Equipped with mobile station calculation result storage means The base station apparatus includes a location registration receiving means for receiving the identification information and the secret key information from the mobile station apparatus at the time of location registration of the mobile station apparatus, and a secret key information received by the location registration receiving means. A base station secret key storage means that stores the information in association with the identification information received by the location registration receiving means, and a base station authentication key storage means that stores the authentication key information in association with the identification information of the mobile station device. , The base station calculation means that performs a predetermined calculation using the authentication key information stored in the base station authentication key storage means, and the base station calculation means that receives the information of the calculation result obtained by the base station calculation means at the time of location registration. The mobile station apparatus includes a base station calculation result storage means that stores the received identification information in association with the received identification information, and the mobile station apparatus stores the calculation in the mobile station calculation result storage means at the time of transmission, one or both of the incoming calls. A communication transmission means for wirelessly transmitting the result information to the base station device is provided. The base station device is a communication receiving means for receiving information on the calculation result from the mobile station device at one or both of the transmission and the incoming call of the mobile station device, and the calculation received by the communication receiving means. The mobile station includes a result information and an authentication means for authenticating the mobile station device based on the calculation result information corresponding to the identification information of the mobile station device stored in the base station calculation result storage means. The device includes a mobile station communication means that performs encrypted communication with the base station device using the secret key information stored in the mobile station secret key storage means, and the base station device is the base station concealment. Wireless communication provided with a base station communication means for performing encrypted communication with a mobile station device of identification information corresponding to the secret key information using the secret key information stored in the key storage means. system. 基地局装置と移動局装置とが無線により通信する無線通信システムにおいて、 前記移動局装置は、前記基地局装置に対する位置登録時に当該移動局装置の識別情報と通信の暗号化に使用する秘匿鍵情報を前記基地局装置に対して無線送信する位置登録時送信手段と、当該移動局装置の認証鍵情報を記憶する移動局認証鍵記憶手段と、当該移動局装置の秘匿鍵情報を記憶する移動局秘匿鍵記憶手段と、前記移動局認証鍵記憶手段に記憶された認証鍵情報を用いて所定の演算を行う移動局演算手段と、前記移動局演算手段により得られた演算結果の情報を記憶する移動局演算結果記憶手段と、を備え、 前記基地局装置は、前記移動局装置の位置登録時に前記移動局装置から前記識別情報と前記秘匿鍵情報を受信する位置登録時受信手段と、前記位置登録時受信手段により受信された秘匿鍵情報を前記位置登録時受信手段により受信された識別情報と対応付けて記憶する基地局秘匿鍵記憶手段と、移動局装置の識別情報に対応付けて認証鍵情報を記憶する基地局認証鍵記憶手段と、前記基地局認証鍵記憶手段に記憶された認証鍵情報を用いて所定の演算を行う基地局演算手段と、前記基地局演算手段により得られた演算結果の情報を前記位置登録時受信手段により受信された識別情報と対応付けて記憶する基地局演算結果記憶手段と、を備え、 前記移動局装置は、発信時又は着信時の一方又は両方に前記移動局演算結果記憶手段に記憶された演算結果の情報を前記基地局装置に対して無線送信する通信時送信手段を備え、 前記基地局装置は、前記移動局装置の発信時又は着信時の一方又は両方に前記移動局装置から前記演算結果の情報を受信する通信時受信手段と、前記通信時受信手段により受信された演算結果の情報と前記基地局演算結果記憶手段に記憶された前記移動局装置の識別情報に対応する演算結果の情報に基づいて前記移動局装置の認証を行う認証手段と、を備え、 前記移動局装置は、前記移動局秘匿鍵記憶手段に記憶された秘匿鍵情報を用いて前記基地局装置との間で暗号化通信を行う移動局通信手段を備え、 前記基地局装置は、前記基地局秘匿鍵記憶手段に記憶された秘匿鍵情報を用いて当該秘匿鍵情報に対応する識別情報の移動局装置との間で暗号化通信を行う基地局通信手段を備えた、 ことを特徴とする無線通信システム。
58 paragraphs, as filed
The present invention relates to a wireless communication system, and more particularly to a wireless communication system in which processing for communication at the time of transmission or reception is accelerated.
FIG. 15 shows an example of a conventional wireless extension telephone system (system using PHS). The wireless extension telephone system of this example has a base station device (CS: Cell Station) 101 having an ISDN (Integrated Services Digital Network) communication function and a PHS (Personal Handy phone System) communication function, and a PHS communication function. It is equipped with a mobile station device (PS: Personal Station) 102, an ISDN router 103, and an IP (Internet Protocol) network 104 composed of a LAN (Local Area Network).
Wireless communication is performed between CS101 and PS102 by the PHS method. An ISDN telephone number is used for communication between the CS101 and the ISDN router 103, and an IP address is used for communication between the ISDN router 103 and the LAN 104, and a gateway function is provided.
Conventionally, in a wireless extension telephone system, when connecting directly from CS101 to LAN104 without going through an exchange, it is common to connect from CS101 to LAN104 via ISDN router 103. This conversion by the ISDN router 103 is one of the delay factors at the time of connection.
FIG. 16 shows an example of the protocol when the PS102 and the server communicate with each other. At Layer 1 (L1), the PHS protocol (RCR STD-28) is used between PS102 and CS101, and the ISDN protocol (ISDN telephone line activation) is used between CS101 and ISDN router 103, ISDN. An Ethernet® protocol is used between router 103 and IP network 104.
At Layer 2 (L2), the PIAFS (PHS Internet Access Forum Standard) protocol is used between PS102 and CS101, and LAPB (Link Access Procedure Balanced) and LAPD (Link Access Procedure) are used between CS101 and ISDN router 103. The for the D-Channel) protocol is used, and the MAC (Media Access Control) protocol is used between the ISDN router 103 and the IP network 104. In layer 2 (L2), a PPP (Point-to-Point Protocol) protocol (PPP negotiation) is used between the PS102 and the ISDN router 103.
At Layer 3 (L3), an IP protocol (IP connection) is used between the PS102 and the IP network 104. Looking at the protocol above layer 2, a PPP session is set up between the PS102 and the ISDN router 103, and IP is used to communicate between the PS102 and the server. In this communication path, the radio section is a bottleneck, but using PPP in this section causes further delay in communication.
FIG. 17 shows a configuration example of CS101 and a configuration example of PS102. The CS101 includes a radio module (RF) 111, a control program 112, and a storage area 113. The PS102 includes a radio module (RF) 121, a control program 122, and a storage area 123. Here, the configurations of CS101 and PS102 are generally different from those of CS1 and PS2 shown in FIG. 5 according to the embodiment described later in that the expanded storage areas 14 and 24 are not provided. There is.
FIG. 18 shows an example of a sequence of location registration processing performed between PS102 and CS101. This sequence is generally different from the sequence shown in FIG. 6 according to the embodiment described later in that the processes (8), (9), and (12) are not provided. FIG. 19 shows an example of the flow of the location registration process performed between PS102 and CS101. In this flow, as compared with the flow shown in FIG. 7 according to the embodiment described later, the processes of C3, P4, and P5 are not provided, and the location registration request message is transmitted instead of the process of P4. It differs in that the process P101 is provided.
FIG. 20 shows an example of a sequence of outgoing processing performed between PS102 and CS101. (1) PS102 wirelessly transmits a signal for link channel establishment request, (2) CS101 wirelessly transmits a signal for link channel allocation, (3) PS102 wirelessly transmits a synchronous burst signal, (2) 4) CS101 wirelessly transmits a synchronous burst signal, (5) PS102 wirelessly transmits a SABM (Set Asynchronous Balanced Mode) signal, and (6) CS101 wirelessly transmits a UA (Unnumbered) signal. Acknowledgement) signal is transmitted wirelessly, (7) PS102 wirelessly transmits the signal for call setting, (8) CS101 wirelessly transmits the signal for accepting call setting, and (9) PS102 wirelessly transmits the secret key setting. (10) CS101 wirelessly transmits a signal for an authentication request, (11) PS102 wirelessly transmits a signal for an authentication response, and (12) CS101 wirelessly transmits a DISC (Disconnect). (13) PS102 wirelessly transmits the UA signal, (14) CS101 wirelessly transmits the call signal, and (15) CS101 wirelessly transmits the response signal. To do.
FIG. 21 shows an example of a sequence of incoming call processing performed between PS102 and CS101. (1) CS101 wirelessly transmits the incoming call signal, (2) PS102 wirelessly transmits the signal for link channel establishment request, (3) CS101 wirelessly transmits the signal for link channel allocation, ( 4) PS102 wirelessly transmits the synchronous burst signal, (5) CS101 wirelessly transmits the synchronous burst signal, (6) PS102 wirelessly transmits the SABM signal, (7) CS101 wirelessly transmits the UA signal. (8) PS102 wirelessly transmits the incoming call response signal, (9) CS101 wirelessly transmits the call setting signal, and (10) PS102 wirelessly transmits the call setting reception signal. , (11) PS102 wirelessly transmits the signal for setting the secret key, (12) CS101 wirelessly transmits the signal for the authentication request, (13) PS102 wirelessly transmits the signal for the authentication response, (14) PS102 wirelessly transmits a call signal, (15) PS102 wirelessly transmits a response signal, (16) CS101 wirelessly transmits a response confirmation signal, and (17) CS101 Wirelessly transmits the signal for DISC, and (18) PS102 wirelessly transmits the UA signal.
<patcit num="1"><text>Japanese Unexamined Patent Publication No. 10-303923</text></patcit><patcit num="2"><text>Japanese Patent Application Laid-Open No. 2005-184053</text></patcit>
<p> As described above, in the conventional wireless extension telephone system as shown in FIG. 15, the protocol as shown in FIG. 16 is used, and there is a problem that communication is slow. The present invention has been made in view of such conventional circumstances, and an object of the present invention is to provide a wireless communication system capable of speeding up processing for communication at the time of outgoing call or incoming call.</p>
<p> In order to achieve the above object, in the present invention, the wireless communication system in which the base station device and the mobile station device communicate wirelessly has the following configuration. That is, in the mobile station apparatus, when the location registration transmission means registers the location with respect to the base station apparatus, the identification information of the mobile station apparatus and the secret key information used for encrypting the communication are transmitted to the base station apparatus. Send wirelessly. The mobile station authentication key storage means stores the authentication key information of the mobile station device. The mobile station secret key storage means stores the secret key information of the mobile station device. The mobile station calculation means performs a predetermined calculation using the authentication key information stored in the mobile station authentication key storage means. The mobile station calculation result storage means stores information on the calculation result obtained by the mobile station calculation means. In the base station apparatus, the location registration receiving means receives the identification information and the secret key information from the mobile station apparatus at the time of location registration of the mobile station apparatus. The base station secret key storage means stores the secret key information received by the location registration receiving means in association with the identification information received by the location registration receiving means. The base station authentication key storage means stores the authentication key information in association with the identification information of the mobile station device. The base station calculation means performs a predetermined calculation using the authentication key information stored in the base station authentication key storage means. The base station calculation result storage means stores the calculation result information obtained by the base station calculation means in association with the identification information received by the location registration receiving means.</p><p> Further, in the mobile station device, the communication transmission means wirelessly transmits the calculation result information stored in the mobile station calculation result storage means to the base station device at one or both of the transmission time and the incoming call time. To do. In the base station device, the communication receiving means receives the information of the calculation result from the mobile station device at one or both of the transmission and the incoming call of the mobile station device. The authentication means is based on the calculation result information received by the communication receiving means and the calculation result information corresponding to the identification information of the mobile station apparatus stored in the base station calculation result storage means. Authenticate the device.</p><p> Then, in the mobile station device, the mobile station communication means performs encrypted communication with the base station device using the secret key information stored in the mobile station secret key storage means. In the base station device, the base station communication means uses the secret key information stored in the base station secret key storage means to perform encrypted communication with the mobile station device of the identification information corresponding to the secret key information. I do.</p><p> Therefore, when the mobile station device registers the location with respect to the base station device, the information of the calculation result based on the authentication key information of the mobile station device is stored in the mobile station device and the base station device, and the information from the mobile station device is stored. When a base station device authenticates the mobile station device using the stored calculation result information when making a call or receiving a call to the mobile station device, for example, when making a call from the mobile station device or to the mobile station device. Compared with the case where a processing procedure for performing arithmetic processing for authentication is used at the time of an incoming call, the processing can be simplified and the processing for communication can be speeded up. Further, when the mobile station device registers the location with respect to the base station device, the secret key information of the mobile station device is registered in the base station device, and when a call is made from the mobile station device or an incoming call is received to the mobile station device. By performing encrypted communication using this stored secret key information, for example, the secret key information is transmitted from the mobile station device to the base station device when making a call from the mobile station device or receiving an incoming call to the mobile station device. The processing can be simplified and the processing for communication can be speeded up as compared with the case where the processing procedure to be performed is used.</p><p> Here, various types of base station devices, mobile station devices, and wireless communication systems may be used. As an example, it can be applied to a PHS system, or it may be applied to various other systems. Further, various kinds of identification information of the mobile station device may be used, and for example, information of a unique number for each mobile station device can be used. For example, the base station apparatus stores various information about each mobile station apparatus in association with the identification information of each mobile station apparatus.</p><p> Further, various information may be used as the secret key information of the mobile station device, and may be updated every time the location is registered, for example. Further, various information may be used as the authentication key information of the mobile station device. For example, the mobile station device and the base station device may be set in common in advance, or may be updated at an arbitrary timing.</p><p> Further, various calculations may be used as predetermined calculations performed using the authentication key information of the mobile station device. For example, random number information (information value) generated by the base station device and the mobile station device. It is possible to use an operation such as calculating a predetermined calculation formula using the authentication key information (information value) of the above as a parameter. In this case, the base station apparatus can use a means for generating random number information or a generated random number. The mobile station apparatus includes means for transmitting information to the mobile station apparatus, and the mobile station apparatus includes means for receiving random number information from the base station apparatus. Further, as a predetermined calculation using the authentication key information performed in the mobile station device and a predetermined calculation using the authentication key information performed in the base station device, for example, the same calculation is performed, and in this case, the movement is performed. Information on the same calculation result is obtained and stored in the station device and the base station device.</p><p> Further, as various storage means, for example, a memory for storing information can be used. Further, in the mobile station device or the base station device, the timing of performing a predetermined calculation using the authentication key information and the timing of storing the calculation result information are not particularly limited, and for example, the timing at the time of location registration is used. Or any subsequent timing may be used. As such a timing, it is preferable to set the timing before the time of transmission or the time of incoming call because the information of the calculation result can be stored in advance.</p><p> Further, the authentication using the calculation result information stored in the mobile station device and the base station device may be performed only at one of the outgoing call and the incoming call, or both. May be good. In addition, whether to perform such authentication processing at the time of outgoing call or incoming call or other authentication processing at the time of outgoing call or incoming call (for example, the same processing as before) is determined for each base station device or each mobile station. It is possible to make it different for each device, and it is also possible to switch the sequence of processing to be executed for each base station device or each mobile station device according to the communication status and the like. ..</p><p> Further, as a method of performing authentication based on the calculation result information of the mobile station device notified from the mobile station device to the base station device and the calculation result information of the mobile station device stored in the base station device. May be used in various ways. For example, when the mobile station device and the base station device store the same calculation result information, the base station device matches the information of both calculation results. If this is the case, the authentication of the mobile station device can be successful, and if the information of both calculation results does not match (mismatch), the authentication of the mobile station device can be failed. For example, if the authentication is successful, the communication processing (outgoing processing and incoming call processing) is continuously performed, and if the authentication is unsuccessful, the communication processing (outgoing call processing and incoming call processing) is stopped.</p>
<p> As described above, according to the wireless communication system according to the present invention, when the mobile station apparatus registers the location with respect to the base station apparatus, the information of the calculation result based on the authentication key information of the mobile station apparatus is referred to as the mobile station apparatus. It is stored in the base station device, and when a call is made from the mobile station device or an incoming call is received to the mobile station device, the base station device authenticates the mobile station device using the stored calculation result information, for example. , Processing for communication can be simplified compared to the case where a processing procedure for performing arithmetic processing for authentication is used when making a call from a mobile station device or receiving a call to a mobile station device. Can be speeded up. Further, when the mobile station device registers the location with respect to the base station device, the secret key information of the mobile station device is registered in the base station device, and when a call is made from the mobile station device or an incoming call is received to the mobile station device. By performing encrypted communication using this stored secret key information, for example, the secret key information is transmitted from the mobile station device to the base station device when making a call from the mobile station device or receiving an incoming call to the mobile station device. The processing can be simplified and the processing for communication can be speeded up as compared with the case where the processing procedure to be performed is used.</p>
Examples of the present invention will be described with reference to the drawings. FIG. 1 shows a configuration example of a wireless extension telephone system (system using PHS) according to an embodiment of the present invention. The wireless extension telephone system of this example is composed of a base station device (CS) 1 having an IEEE 802.3 communication function and a PHS communication function, a mobile station device (PS) 2 having a PHS communication function, and a LAN. It has IP network 3. The number of CS1s and PS2s may be arbitrary, and usually, one CS1 can accommodate a plurality of PS2s (location registration).
Here, CS1 has both PHS and LAN interfaces, and can communicate with each other. Wireless communication is performed between CS1 and PS2 by the PHS method, and it is possible to communicate data and the like. CS1 and LAN3 are connected by wire or wirelessly, and an IP address is used for communication between CS1 and LAN3.
Figure 2 shows an example of the data table provided in CS1 and PS2. (1) The PS number data is a key used to identify the PS2 and is stored in the memory of the CS1. (2) High-speed availability data identifies whether or not high-speed incoming / outgoing calls are supported, and is stored in the memory of both CS1 and PS2. In this example, this data is registered in advance on the CS1 side, or corresponds to whether or not the secret key is transmitted from the PS2 at the time of location registration. (3) The connection method data identifies whether the connection is a PPP connection or a non-procedural connection, and is stored in the memory of CS1. For example, if this data is not set for each PS2, it is stored in a separate table in CS1.
(4) The IP address data is used by PHS for transmission and reception to and from the server, and is stored in the memory of CS1. (5) The secret key data is used for communication encryption, updated every time the location is registered, and stored in the memory of both CS1 and PS2. In this example, the PS2 secret key that cannot be used at high speed is not saved (in this example, when registering the location). (6) The data of the authentication key calculation result is used for authentication of the terminal (PS2 in this example), is updated every time the location is registered, and is stored in the memory of both CS1 and PS2.
Figure 3 shows an example of the protocol when the PS2 and the server communicate. At Layer 1 (L1), the PHS protocol (RCR STD-28) is used between PS2 and CS1, and the Ethernet (registered trademark) protocol is used between CS1 and IP network 3. At Layer 2 (L2), the PIAFS protocol is used between PS2 and CS1, and the MAC protocol is used between CS1 and IP network 3. At layer 3 (L3), a non-procedural protocol is used between PS2 and CS1, and an IP protocol (IP connection) is used between CS1 and IP network 3.
In the example protocol shown in Figure 3, PIAFS data from the registered PS2 is encapsulated in TCP (Transmission Control Protocol) / IP or UDP (User Datagram Protocol) / IP packets and pre-registered according to the data table. Send to the server. Also, the data part of the IP packet from the server to the IP registered for PS2 is transmitted to PS2 as PIAFS data.
Figure 4 shows another example of the protocol for the PS2 to communicate with the server. In this example, a connection form similar to the logical form in the existing system shown in FIG. 16 is used. At Layer 1 (L1), the PHS protocol (RCR STD-28) is used between PS2 and CS1, and the Ethernet (registered trademark) protocol is used between CS1 and IP network 3.
At Layer 2 (L2), the PIAFS protocol is used between PS2 and CS1, and the MAC protocol is used between CS1 and IP network 3. In layer 2 (L2), the PPP protocol is used between PS2 and CS1. At layer 3 (L3), an IP protocol (IP connection) is used between PS2 and IP network 3. In this case, CS1 has a DHCP (Dynamic Host Configuration Protocol) function, and has a function of dynamically or statically assigning an IP address at the time of PPP connection.
Here, CS1 functions as a router in terms of network system. CS1 has a correspondence table of PS2 and IP address, and when it receives data addressed to the IP address registered in this correspondence table, it automatically receives and connects to the corresponding PHS (PS2). Perform processing.
As described above, in the wireless extension telephone system of this example, the PHS data and the LAN data are directly converted. Therefore, the overhead of ISDN conversion is eliminated as compared with the conventional system as shown in FIG. 15, for example. Can be done. Further, for example, by supporting the connection as shown in FIG. 3, the overhead of PPP connection and conversion can be eliminated, and the communication speed can be increased as a whole.
Hereinafter, the wireless extension telephone system of this example will be further described. CS1 has a function to receive a secret key when registering the location of PS2 and memorize the secret key for each PS2, a function to memorize authentication information when registering the location to the CS1, etc. It has a function to notify that it corresponds to incoming and outgoing calls. PS2 has a function to receive notification from CS1 that it supports high-speed incoming / outgoing calls, and a function to correspond to high-speed incoming / outgoing sequences and messages (telegrams).
FIG. 5 shows a configuration example of CS1 and a configuration example of PS2. The CS1 includes a radio module (RF) 11, a control program 12, a storage area 13, and an expanded storage area 14. The PS2 includes a radio module (RF) 21, a control program 22, a storage area 23, and an extended storage area 24. Here, CS1 and PS2 have a function of storing data as shown in FIG.
In CS1, the wireless module 11 has a function of wirelessly connecting to other similar modules, and the control program 12 has a function of controlling the wireless module 11 and communicating with other PS2 etc. on it ( For example, it has a wireless control driver, authentication processing, call processing, and other functions), and the storage area 13 has a function of storing parameters used by the control program 12. The storage area 13 stores the registered authentication key for each PS2, the system ID (System-ID), and the like. Further, in the expanded storage area 14, the authentication key calculation result and the secret key (registered secret key) exchanged between the PS2 and CS1 at the time of location registration are stored.
In PS2, the wireless module 21 has a function of wirelessly connecting to other similar modules, and the control program 22 has a function of controlling the wireless module 21 and then communicating with other PS2s, etc. ( For example, it has a wireless control driver, authentication processing, call processing, and other functions), and the storage area 23 has a function of storing parameters used by the control program 22. The PS2 authentication key, system ID (System-ID), and the like are stored in the storage area 23. Further, in the expanded storage area 24, the authentication key calculation result and the secret key (registered secret key) exchanged between the PS2 and CS1 at the time of location registration are stored.
Next, the location registration operation will be described. FIG. 6 shows an example of the sequence of location registration processing performed between PS2 and CS1. (1) First, PS2 wirelessly transmits a link channel establishment request signal to CS1 in order to request link setting. (2) In response, CS1 wirelessly transmits a link channel allocation signal to tell PS2 the free carrier number. (3) PS2 wirelessly transmits a synchronization burst signal used to ensure frequency and temporal synchronization in order to switch from CS1 to the specified channel. (4) Similarly, CS1 wirelessly transmits a synchronous burst signal to PS2. In this way, the synchronous burst signals are transmitted to each other. (5) PS2 wirelessly transmits the SABM command signal. (6) CS1 wirelessly transmits and returns the UA response signal as a response. With the above, the communication link is established.
(7) PS2 starts location registration by wirelessly transmitting the signal of the location registration request message to CS1. (8) In this example, the PS2 wirelessly transmits the signal of the secret key setting message together with the above-mentioned location registration request message. (9) The CS1 that receives the signal of the location registration request message stores the secret key (the secret key corresponding to the PS number) received for each PS2.
(10) CS1 (net) generates an authentication random number as an authentication process, and wirelessly transmits the signal of the authentication request message to PS2 to notify the random number. (11) Upon receiving this, the PS2 executes the calculation using the random number and the authentication key of its own device (the PS2), and uses the signal of the authentication response message to convert the calculation result (authentication key calculation result) into CS1 ( Notify the net). Upon receiving this, CS1 similarly determines whether or not the authentication key calculation result obtained by using the authentication random number and the authentication key registered in the system matches the authentication key calculation result notified from PS2. .. (12) In addition, CS1 stores the authentication key calculation result used in the authentication process for each PS2. (13) CS1 wirelessly transmits the signal of the location registration acceptance message to PS2 when the location registration is completed normally by the authentication process.
(14) Next, in order to break the link, CS1 wirelessly transmits the DISC command signal to PS2. (15) PS2 wirelessly transmits the UA response signal as a response and returns it. (16) CS1 receives it and wirelessly transmits a signal for disconnecting the radio channel in order to release the radio channel. (17) PS2 wirelessly transmits and returns a signal that the wireless channel has been disconnected, and returns to standby.
FIG. 7 shows an example of the flow of the location registration process performed between PS2 and CS1. When the process for location registration is started by PS2 (process P1), first, the link channel between PS2 and CS1 is established (process P2, process C1). PS2 stores the PS number of its own device (process P3), sends a location registration request message to CS1, and sends a secret key setting message together with the location registration request message (process P4).
Upon receiving the location registration request message, CS1 performs the authentication process as shown in Fig. 8 (process C2). The PS2 stores the secret key for communication encryption sent by the secret key setting message and the authentication key calculation result sent by authentication (process P5). Similarly, CS1 also stores the secret key received for each PS2 and the authentication key calculation result used in the authentication process (process C3). When the authentication is completed, CS1 sends the location registration reception to PS2, and the location registration is completed (process P6).
Here, since the secret key is not transmitted at the time of location registration in the conventional sequence of location registration processing as shown in FIG. 19, in this example, the terminal that has transmitted the secret key setting message at the time of location registration (PS2 in this example). ) Is determined to be a high-speed incoming call compatible terminal and stored. Further, in this example, since the authentication key calculation result is updated every time the location is registered, the security of communication is guaranteed to be almost the same as the conventional one.
FIG. 8 shows an example of the flow of normal authentication processing performed between PS2 and CS1. When the CS1 side starts the authentication process (process C11), the CS1 first generates an authentication random number (process C12) and sends it to the PS2 in an authentication request message (process C13). PS2 acquires the authentication random number (process P11), stores the authentication key (process 12), calculates the received random number and the authentication key of its own device (the PS2) (process P13), and the calculation result. Is notified to the CS1 side by an authentication request response message (process P14).
For example, CS1 stores the authentication key of PS2 in advance (process C14), and performs an operation using the authentication random number and the authentication key registered in the system (process C15). In addition, CS1 receives the calculation result from PS2 (process C16), compares (matches) the calculation result notified from PS2 with the calculation result obtained by the own device (CS1), and determines the authentication result. (Processing C17). As a result, for example, if both calculation results match, the authentication success is determined (process C18), and if both operation results do not match, the authentication failure is determined (process C19).
Next, the notification from CS1 to PS2 will be described. In an environment where CS1 that supports high-speed transmission and CS1 that does not support high-speed transmission are mixed, it is necessary for PS2 to determine whether CS1 supports high-speed transmission. Figures 9 (a), (b), and (c) show an example of the notification operation from CS1 to PS2. In Fig. 9 (a), CS1 stores the secret key and authentication key calculation result for each PS2, and PS2 stores its own secret key and authentication key calculation result. PS2 sends a location registration request and a secret key to CS1.
In FIG. 9 (b), CS1 notifies PS2 that its own device (the CS1) is compatible with high-speed transmission, for example, by a notification message sent periodically. As a specific example, the CS1 notifies each PS2 that the CS1 supports high-speed data transmission / reception by means of an option notification information message. In this case, each PS2 remembers that the CS1 whose location is being registered supports high-speed transmission. This stored content is deleted when the location registration destination of PS2 is changed.
In Fig. 9 (c), PS2 uses the sequence of high-speed outgoing call processing when CS1 supports high-speed outgoing call, and uses the sequence of normal outgoing call processing when CS1 does not support high-speed outgoing call. use. As a result, PS2 can use a unique sequence that simplifies authentication and the like.
Next, high-speed incoming / outgoing calls will be described. FIG. 10 shows an example of a sequence of high-speed transmission processing performed between PS2 and CS1. (1) PS2 wirelessly transmits the signal for link channel establishment request, (2) CS1 wirelessly transmits the signal for link channel allocation, (3) PS2 wirelessly transmits the synchronous burst signal, ( 4) CS1 wirelessly transmits the synchronous burst signal, (5) PS2 wirelessly transmits the SABM signal, and (6) CS1 wirelessly transmits the UA signal. (7) PS2 wirelessly transmits a signal for high-speed data call setting, (8) CS1 refers to the authentication key calculation result, and (9) CS1 wirelessly transmits a signal for accepting high-speed data call setting. (10) CS1 wirelessly transmits the signal for DISC (Disconnect), (11) PS2 wirelessly transmits the UA signal, (12) for example, encrypts with the stored secret key, and communication is performed. Will be.
FIG. 11 shows an example of a sequence of high-speed incoming call processing performed between PS2 and CS1. (1) CS1 wirelessly transmits the incoming call signal, (2) PS2 wirelessly transmits the signal for link channel establishment request, (3) CS1 wirelessly transmits the signal for link channel allocation, ( 4) PS2 wirelessly transmits the synchronous burst signal, (5) CS1 wirelessly transmits the synchronous burst signal, (6) PS2 wirelessly transmits the SABM signal, (7) CS1 wirelessly transmits the UA signal. (8) PS2 wirelessly transmits the incoming call response signal, (9) CS1 wirelessly transmits the signal for high-speed data call setting, and (10) PS2 wirelessly transmits the signal for high-speed data call setting reception. To send wirelessly. (11) CS1 wirelessly transmits the signal for DISC, and (12) PS2 wirelessly transmits the UA signal. As a result, for example, communication is performed by encrypting with the stored secret key.
FIG. 12 shows an example of the flow of high-speed outgoing authentication processing performed between PS2 and CS1. PS2 stores the authentication calculation result (authentication key calculation result) (processing P21), and sends a high-speed call setting message including the calculation result to CS1 (processing P22). CS1 stores the authentication calculation result (authentication key calculation result) (processing C21), receives the high-speed call setting message from PS2 (processing C22), and stores the received calculation result and the stored calculation result. Match (process C23). As a result, for example, if both calculation results match, the authentication success is determined (process C24), and if both operation results do not match, the authentication failure is determined (process C25).
FIG. 13 shows an example of a message format for high-speed data call settings. The direction from PS2 to CS1 is up, and the direction from CS1 to PS2 is down. Information elements include protocol identifier (both directions), call number (both directions), message type (both directions), calling number (both directions), incoming number (both directions), PS number (uplink), and authentication key calculation result (uplink). FIG. 14 shows an example of a message format for accepting high-speed data call settings. Information elements include a protocol identifier (both directions), a call number (both directions), a message type (both directions), and an authentication key calculation result (uplink).
Here, in the conventional sequence of outgoing call processing as shown in FIG. 20, after the link is established, PS2 sends a call setting telegram to CS1 to notify the start of call setting, and the destination and the sender. Notify the information to CS1 (net side) (process 7). Upon receiving the call setting message, CS1 sends a call setting acceptance message to PS2 to indicate that the requested call setting has started (process 8). After that, PS2 sends the secret key to CS1 by the secret key setting message (process 9) . In response to this, CS1 authenticates in the same way as the location registration process (process 10).
On the other hand, in the high-speed data transmission processing sequence of this example as shown in FIG. 10, after the link is established, PS2 sends a high-speed data call setting message containing the authentication key calculation result saved in the location registration processing. It is sent to CS1 (Process 7), and when CS1 receives the high-speed data call setting message, it authenticates by comparing the saved authentication key calculation result of the PS2 with the received authentication key calculation result (Process 8). , Send the high-speed data call setting reception message to PS2 (process 9).
In this example, when the own device (the PS2) is registered under CS1 corresponding to high-speed data transmission / reception, the PS2 transmits using the high-speed data transmission processing sequence as shown in FIG. .. In this sequence, transmission and authentication are performed using the high-speed data call setting message as shown in FIG. 13, and authentication is also performed by comparing the results calculated in advance at the time of location registration. , It is possible to finish the sequence in a short time and shift to data communication.
In this example, when the CS1 makes an incoming call to the PS2 corresponding to the high-speed data incoming / outgoing call, the CS1 performs the incoming call processing using the high-speed data incoming call processing sequence as shown in FIG. In this sequence as well, as in the case of outgoing calls, it is possible to shift to data communication in a shorter time than in a normal incoming call processing sequence.
Specifically, in the conventional incoming call processing sequence as shown in FIG. 21, the incoming call message is first sent from CS1 to PS2 (process 1) before the link, and when the link is established, PS2 arrives at CS1. Returns a call answer message (process 8). After that, the call setting telegram is transmitted from CS1 (process 9), PS2 returns the call setting acceptance telegram (process 10), and thereafter, the process is roughly the same as the outgoing call process. On the other hand, in the incoming call processing sequence of this example as shown in FIG. 11, as in the outgoing call processing, for example, the authentication key calculation result of the PS2 included in the high-speed data call setting reception message received from the PS2 by the CS1. And by performing authentication using the authentication key calculation result of the PS2 stored in the CS1, the processing after the call setting and the call setting reception (for example, the processing of the secret key setting and the complicated for authentication) Processing) can be omitted and the processing can be compressed as a whole.
As described above, in the wireless extension telephone system (system using PHS) of this example, the mobile station device (PS) 2 does not connect to the switchboard (that is, without the switchboard), and the base station device (CS). ) 1 has a configuration to connect to and communicate with IP network (LAN) 3, and protocol conversion that can directly connect to LAN3 instead of connecting to LAN3 via a general ISDN router. CS1 has the function. As an example, CS1 of this example has a function to transfer data between PS2 and CS1 in the network layer without any procedure, and to put data in IP packet in CS1 and communicate with a preset server. are doing. As another example, CS1 of this example has a function of terminating PPP at the CS1 and enabling an IP connection between the terminal and the server. In these processes, for example, the parameters related to the connection method and the IP address shown in FIG. 2 are used. Further, in the wireless extension telephone system of this example, a simplified high-speed connection sequence is used when the PS2 and CS1 make a data communication connection.
Therefore, in this example, in the PHS system having the LAN direct collection type base station device (CS) 1, it is possible to speed up data transmission and data reception to speed up communication. Specifically, the connection time can be expected to be significantly reduced. Moreover, since all the additional messages in this example are within the range of the conventional standard (ARIB STD-28), for example, it is possible to coexist with the conventional system without disturbing the conventional sequence. As described above, in this example, for example, delays in connection and communication in a conventional system can be eliminated, PHS data transmission / reception and communication can be speeded up, and a higher-speed PHS data communication system can be realized. .. Further, since the system of this example does not interfere with the existing incoming / outgoing calls, it can coexist with the existing data communication system.
In the mobile station device (PS) 2 of this example, the identification information of the own device (PS number information in this example) and the secret key information are transmitted to the base station device (CS) 1 at the time of location registration. The transmission means at the time of location registration is configured, and the mobile station authentication key storage means is configured by the function of storing the authentication key information of the own device in the memory (storage area 23 in this example), and the own device is kept secret. The mobile station secret key storage means is configured by the function of storing the key information in the memory (extended storage area 24 in this example), and the information of the authentication key of the own device and the information of the random number notified from CS1. The mobile station calculation means is configured by the function of performing a predetermined calculation using the above, and the information of the calculation result (authentication key calculation result in this example) is stored in the memory (extended storage area 24 in this example). The mobile station calculation result storage means is configured by the storage function, and the function to send the calculation result information to CS1 by the high-speed data call setting message shown in FIG. 10 at the time of transmission or the high-speed data call shown in FIG. 11 at the time of incoming call. The communication transmission means is configured by the function of transmitting the calculation result information to CS1 by the setting reception message, and the mobile station communication means is configured by the function of performing encrypted communication using the secret key information.
Further, in the base station device (CS) 1 of this example, the receiving means at the time of location registration is configured by the function of receiving the identification information (in this example, the information of the PS number) and the secret key information from PS2 at the time of location registration. The base station secret key storage means is configured by the function of associating the PS2 secret key information with the identification information and storing it in the memory (extended storage area 14 in this example), and the PS2 authentication key The base station authentication key storage means is configured by the function of associating the information with the identification information and storing it in the memory (storage area 13 in this example), and the PS2 authentication key information and the random number information generated by the own device. The base station calculation means is configured by the function of performing a predetermined calculation using the PS2, and the information of the calculation result (in this example, the authentication key calculation result) is associated with the identification information of PS2 and is stored in the memory (in this example,). The base station calculation result storage means is configured by the function of storing in the expanded storage area14), and the communication reception means is configured by the function of receiving the calculation result information from PS2 at the time of outgoing call or incoming call. The authentication means is configured by the function of performing the authentication process of the PS2 by referring to the operation result information received from the PS2 and the operation result information stored in association with the PS2, and the secret key information is used. The base station communication means is configured by the function of performing encrypted communication.
Here, the configurations of the system, the device, and the like according to the present invention are not necessarily limited to those shown above, and various configurations may be used. Further, the present invention can be provided, for example, as a method or method for executing the process according to the present invention, a program for realizing such a method or method, a recording medium for recording the program, or the like. It can also be provided as various systems and devices. Further, the fields of application of the present invention are not necessarily limited to those shown above, and the present invention can be applied to various fields. Further, as various processes performed in the system or device according to the present invention, for example, the processor executes a control program stored in ROM (Read Only Memory) in a hardware resource including a processor, memory, or the like. A controlled configuration may be used, and for example, each functional means for executing the process may be configured as an independent hardware circuit. Further, the present invention relates to a floppy (registered trademark) disk or a CD (Compact) containing the above control program. Disc)-It can be grasped as a recording medium such as ROM that can be read by a computer or the program (itself), and the control program is input to the computer from the recording medium and executed by the processor, according to the present invention. The process can be carried out.
<figref num="1">It is a figure which shows the structural example of the wireless extension telephone system which concerns on one Example of this invention.</figref><figref num="2">It is a figure which shows an example of the data stored in CS and PS.</figref><figref num="3">It is a figure which shows an example of the protocol at the time of communication between PS and a server.</figref><figref num="4">It is a figure which shows another example of the protocol when PS and a server communicate with each other.</figref><figref num="5">It is a figure which shows the configuration example of CS and PS.</figref><figref num="6">It is a figure which shows an example of the sequence of the position registration processing.</figref><figref num="7">It is a figure which shows an example of the flow of a location registration process.</figref><figref num="8">It is a figure which shows an example of the flow of a normal authentication process.</figref><figref num="9">(a), (b), and (c) are diagrams showing an example of the operation of notification from CS to PS.</figref><figref num="10">It is a figure which shows an example of the sequence of high-speed transmission processing.</figref><figref num="11">It is a figure which shows an example of the sequence of high-speed incoming call processing.</figref><figref num="12">It is a figure which shows an example of the flow of the authentication process of high-speed transmission.</figref><figref num="13">It is a figure which shows an example of the message format of a high-speed data call setting.</figref><figref num="14">It is a figure which shows an example of the message format of the high-speed data call setting reception.</figref><figref num="15">It is a figure which shows an example of the conventional wireless extension telephone system.</figref><figref num="16">It is a figure which shows an example of the protocol at the time of communication between PS and a server.</figref><figref num="17">It is a figure which shows the configuration example of CS and PS.</figref><figref num="18">It is a figure which shows an example of the sequence of the position registration processing.</figref><figref num="19">It is a figure which shows an example of the flow of a location registration process.</figref><figref num="20">It is a figure which shows an example of the sequence of transmission processing.</figref><figref num="21">It is a figure which shows an example of the sequence of incoming call processing.</figref>
Code description
1, 101 ... Base station equipment (CS), 2, 102 ... Mobile station equipment (PS), 3, 104 ... IP network (LAN), 11, 21, 111, 121 ... RF (radio module), 12, 22, 112, 122 ... Control programs 1, 3, 23, 113, 123 ... Storage, 14, 24 ... Extended storage, 103 ... ISDN router,
Every citation, both ways
| Document | Relation | Office | Cited during |
|---|---|---|---|
| WO2016043054A1 | Cited by | World Intellectual Property Organization (WIPO) | International search |
| JPWO2016043054A1 | Cited by | Japan | Search report |
2 priority claims, no other members on record
Priority claims2
| Document | Office | Kind | Date |
|---|---|---|---|
| 2007149393 | Japan | A | |
| JP20070149393 | – | – | – |
Numbers
- Publication
- 2008306282
- Publication, DOCDB
- 2008306282
- Publication, EPODOC
- JP2008306282
- Application
- 149393
- Application, DOCDB
- 2007149393
- Application, EPODOC
- JP20070149393
Titles3
- Japanese
- 無線通信システム
- English
- Wireless communication system
- English
- RADIO COMMUNICATION SYSTEM
Classification
- IPC, 5
- H04Q7 38
- H04W12 00
- H04W12 06
- H04W60 00
- H04W76 02